The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade python-perfUpgrade kernel-abi-whitelistsUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perf | Aug 6, 2016 | Dec 28, 2015 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Dec 28, 2015 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf | Nov 30, 2017 | Dec 28, 2015 |
| Oracle_linux | — | Upgrade kernel-uek-develUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernelUpgrade kernel-uek-debug-develUpgrade dtrace-modulesUpgrade kernel-uek-debugUpgrade kernel-uek-doc | Aug 2, 2016 | Dec 28, 2015 |
| Redhat_linux | — | Upgrade kernel-kdumpUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade python-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-kdump-develUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-abi-whitelistsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-trace-debuginfoUpgrade kernel-rt-docUpgrade perfUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-ppc64Upgrade perf-debuginfoUpgrade kernel-docUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-traceUpgrade python-perfUpgrade kernel-rt-trace-develUpgrade kernel-bootwrapperUpgrade kernel-rt-develUpgrade kernel-kdump-debuginfo | Aug 2, 2016 | Dec 28, 2015 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-ec2-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-ec2Upgrade kernel-ec2-devel | Feb 25, 2016 | Dec 28, 2015 |
| Ubuntu | — | Upgrade linux-image-3.19.0-43-lowlatencyUpgrade linux-image-4.2.0-23-lowlatencyUpgrade linux-image-3.19.0-43-powerpc64-embUpgrade linux-image-4.2.0-23-powerpc-smpUpgrade linux-image-4.2.0-23-generic-lpaeUpgrade linux-image-3.19.0-43-powerpc-e500mcUpgrade linux-image-4.2.0-23-powerpc-e500mcUpgrade linux-image-4.2.0-23-powerpc64-embUpgrade linux-image-3.19.0-43-genericUpgrade linux-image-3.19.0-43-powerpc64-smpUpgrade linux-image-4.2.0-23-genericUpgrade linux-image-4.2.0-1018-raspi2Upgrade linux-image-3.19.0-43-powerpc-smpUpgrade linux-image-3.19.0-43-generic-lpaeUpgrade linux-image-4.2.0-23-powerpc64-smp | Feb 2, 2016 | Dec 28, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub